chore: public OSS release 2.5.2

[keshprad]

SkillSpector 2.5.2 release refresh

This refresh aligns the existing release PR with the corrected release/2.5.2 source.

Included

• Updated 2.5.2 changelog and release notes for registry posture scanning, exact lockfile OSV matching, static-analysis false-positive reductions, Windows cleanup, and safer SC4 reporting.
• Bumped the public package metadata and lockfile to 2.5.2.
• Preserved the current public implementation and GitHub automation from main.

Validation

• Full CI-equivalent unit suite passed on the corrected release source.
• Sanitized OSS snapshot make test-unit smoke gate passed.
• The GitLab pipeline for the corrected source is running; release/tag alignment was completed at maintainer direction without waiting for it.